Only thing I can think of is he was trying to backdoor my Device an wanted to store some form of connectback shell or something that sort in the hidden file, thats really the only thing I can think of since I showed him how insecure one of the sites he built was.

Either way is sorted now anyway. Im just guna have to check what over files may have changed.

that was what I was going to say... sounds like a half-fast rootkit attempt.

glad you were able to clean it up.

If that "friend" of yours had unrestricted root access for any lenght of time (as has been implied) re-flash the device now! There's no telling what other hidden "surprises" your tablet has in it now.

So he can SSH into the tablet whenever he wants perhaps? If he's got your private key, he can do all sorts of stuff :P

Next time you see the "friend", ask if you can use the computer to check your emails and dump a few viruses on the computer.

Iv flashed an started from scrach, il be paying him back in kinda when I next get the chance